Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
cashmereexchange.asia shows high-risk / scam indicators.
| What this site appears to be | Doppler Finance marketing/governance page describing vaults, yield distribution voting, and wallet connection options. The site invites users to connect EVM or XRP wallets and participate in depositors/LP reward distribution. On-page disclaimers note yields are illustrative and not guaranteed, but there is limited visible evidence of audits, custody model, or verifiable on-chain mechanics. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 12 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 15 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself as “Doppler Finance,” a decentralized-finance platform offering vaults, yield distribution, governance voting, and yield-as-a-service for depositors and liquidity providers, while operating on the reviewed cashmereexchange.asia domain. Its visitor-facing model asks users to connect EVM or XRP wallets and potentially deposit digital assets in exchange for protocol yield and governance rewards.
Scam/Impersonation Risk
The site presents a critical sensitive-interaction risk because external threat intelligence recorded malicious detections and confirmed blacklist entries for the domain; this is a decisive contradiction that outweighs the site’s functional appearance and valid transport encryption. The homepage’s operating model also involves deposit-before-service activity: users are invited to connect wallets, participate in yield-allocation voting, and use XRP and RLUSD vaults, while the page provides limited visible evidence of audits, custody protections, or independently verifiable on-chain mechanics. The page’s disclaimers state that yields are illustrative, not guaranteed, and that the rewards are not registered financial products; those disclaimers do not resolve the external threat findings or the opaque value-flow concerns. No separate brand-impersonation or conflicting legal-entity finding was supplied, but the confirmed blacklist and malicious detections are sufficient to require a security-forward posture.
- The reviewed domain was recorded as malicious by 12 evaluated detections and suspicious by 2 additional detections; the external findings included Fortinet, Kaspersky, and Sophos.
- The domain was confirmed on external blacklist sources, with the malicious finding attributed to the domain rather than to an identified impersonated brand.
- The homepage offers “XRP Vault,” “RLUSD Vault,” governance voting, and wallet connection for EVM and XRP wallets, while identifying four red flags: opaque value flow, remote yield infrastructure, a high-stakes evidence gap, and claim-evidence dissonance.
- Domain registration: 2026-10-05; age 0.04 years.
Regulatory Verification Notes
The site’s legal and regulatory presentation is limited. Its disclaimer says the reward structures are not financial products and are not registered under securities laws, and the supplied evidence contains no claimed license or registration number. This should be treated as a material verification gap for a platform soliciting digital-asset deposits and wallet interaction, not as a standalone determination of fraud. Independent identity verification remains unresolved: the registration record names Aokigahara Digital Services, while the visitor-facing page uses the Doppler Finance name; the available evidence does not establish that these names represent the same real-world operator. A separate broker-reputation dataset produced no match, which provides no positive regulatory or licensing conclusion.
- The site’s disclaimer page content states that rewards are not financial products, are not registered under securities laws, and are not guaranteed.
- The registration record lists Spaceship, Inc. as registrar and Aokigahara Digital Services as the organization; the public-facing site title is “Doppler Finance.”
- Registered 2026-10-05; expires 2027-10-05.
- TLS certificate: issuer YE1, domain validation (DV), valid to 2027-01-03T20:43:44+00:00.
What to Verify Next
Before any sensitive interaction, an institution should independently confirm the operating entity, beneficial ownership, licensing position, custody model, audit reports, smart-contract addresses, and the legal enforceability of the Terms of Service through authoritative registries and an offline contact route. Wallet addresses and contract code should be checked against trusted blockchain explorers and security-review records rather than relying on links or claims presented by the site. Until those checks produce independently corroborated results, no wallet connection, deposit, credential submission, or financial transaction should be authorized.
- The homepage directs users to governance voting and wallet connection before submitting votes or participating in the protocol.
- The site references Docs, Terms of Service, Privacy Policy, and Disclaimer materials as the locations for further operating information.
- The visible page provides no independently verifiable audit, custody, or on-chain-mechanics evidence for the described yield infrastructure.
- The site offers both depositor and liquidity-provider reward paths, requiring verification of how value moves between participants and the protocol.
Summary Verdict
The available evidence supports a critical-risk posture for sensitive interaction. The site may be technically functional and present a coherent DeFi interface, but its confirmed malicious and blacklist findings, unresolved operator identity, and deposit-oriented financial model make it unsuitable for credentials, wallet access, or financial activity.
Infrastructure Integrity
The site is protected by Cloudflare CDN/WAF infrastructure, and all observed addresses were CDN edge servers rather than identified origin candidates. This provides a mitigating layer against direct origin exposure but does not validate the operator or offset the external threat findings.
- Served through CLOUDFLARENET — Cloudflare, Inc., US.
- Hosting ASN: AS13335.
- Observed edge addresses: 104.21.37.218, 172.67.213.155, 2606:4700:3030::6815:25da, and 2606:4700:3033::ac43:d59b.
- The observed infrastructure resolved through Cloudflare CDN/WAF, with 4 edge IPs and 0 likely origin IPs.
Closing Assessment
The appropriate disposition is to block sensitive interaction and require documented remediation and independent operator verification before reconsideration. Read-only observation may be retained for monitoring or investigative purposes, but wallet connection, deposits, credentials, and financial transactions should not proceed.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, hosting and network, history in the web archive.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of cashmereexchange.asia.
- The request stayed on cashmereexchange.asia. It was not redirected to another domain. Clear
- Registration is published under Spaceship, Inc.. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-05. Noted
- The earliest public archive of this site is from 2026-10-05. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Spaceship, Inc. |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3030::6815:25da |
| Name servers | henry.ns.cloudflare.com, gigi.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2027-01-03 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | 2027-10-05 |
| Archive first seen | 2026-10-05 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 12 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about cashmereexchange.asia at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.